@astrojs/node's trailing slash handling causes open redirect issue

Summary Following https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw, there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios. Details Astro 5.12.8 fixed a case where https://example.com//astro.build/press would redirect to the external origi...

GHSA-9X9C-GHC5-JHW9 @astrojs/node's trailing slash handling causes open redirect issue

Summary Following https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw, there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios. Details Astro 5.12.8 fixed a case where https://example.com//astro.build/press would redirect to the external origi...

CVE-2025-55207 @astrojs/node's trailing slash handling causes open redirect issue

Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...

CVE-2025-55207 @astrojs/node's trailing slash handling causes open redirect issue

Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...

Malicious code in cycle-monorepo-sandbox-rxjs-adapter (npm)

The package cycle-monorepo-sandbox-rxjs-adapter was found to contain malicious code...

Malicious code in w11k-select-ngx-adapter (npm)

The package w11k-select-ngx-adapter was found to contain malicious code...

Malicious code in cycle-monorepo-sandbox-most-adapter (npm)

The package cycle-monorepo-sandbox-most-adapter was found to contain malicious code...

Malicious code in cycle-monorepo-sandbox-xstream-adapter (npm)

The package cycle-monorepo-sandbox-xstream-adapter was found to contain malicious code...

Malicious code in activerecord-pedantmysql2-adapter (npm)

The package activerecord-pedantmysql2-adapter was found to contain malicious code...

Malicious code in cycle-monorepo-sandbox-rx-adapter (npm)

The package cycle-monorepo-sandbox-rx-adapter was found to contain malicious code...

MAL-2025-17879 Malicious code in cycle-monorepo-sandbox-xstream-adapter (npm)

The package cycle-monorepo-sandbox-xstream-adapter was found to contain malicious code...

MAL-2025-14052 Malicious code in activerecord-pedantmysql2-adapter (npm)

The package activerecord-pedantmysql2-adapter was found to contain malicious code...

MAL-2025-17873 Malicious code in cycle-monorepo-sandbox-most-adapter (npm)

The package cycle-monorepo-sandbox-most-adapter was found to contain malicious code...

MAL-2025-17875 Malicious code in cycle-monorepo-sandbox-rx-adapter (npm)

The package cycle-monorepo-sandbox-rx-adapter was found to contain malicious code...

MAL-2025-17877 Malicious code in cycle-monorepo-sandbox-rxjs-adapter (npm)

The package cycle-monorepo-sandbox-rxjs-adapter was found to contain malicious code...

MAL-2025-38726 Malicious code in w11k-select-ngx-adapter (npm)

The package w11k-select-ngx-adapter was found to contain malicious code...

Deserialization Of Untrusted Data

ms-swift is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to unsafe deserialization due to malicious pickle deserialization in adapter model files, allowing arbitrary command execution when loading specially crafted adapter models from ModelScope...

Linux Distros Unpatched Vulnerability : CVE-2024-26620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: always filter entire AP matrix The vfioapmdevfiltermatrix function is called...

Linux Distros Unpatched Vulnerability : CVE-2021-47425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle...

CVE-2025-54793

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbitrary external domains by crafting URLs...